imx8mp secure boot on linux kernel

[John-gao]

      reference resources  .

      Succeeded in uboot verification

       Image authentication failed

    1、Load Image Manually

u-boot=> hab_status

Secure boot enabled

HAB Configuration: 0xcc, HAB State: 0x99
No HAB Events Found!

u-boot=> fatload mmc 1:1 40480000 Image
30740328 bytes read in 1278 ms (22.9 MiB/s)
u-boot=> hab_auth_img 40480000 1d51000 1d50000

Authenticate image from DDR location 0x40480000...
GLS_HAB hab_rvt_authenticate_image 001 current_el = 2
GLS_HAB ret = 0x0

Secure boot enabled

HAB Configuration: 0xcc, HAB State: 0x99

--------- HAB Event 1 -----------------
event data:
        0xdb 0x00 0x24 0x45 0x33 0x18 0xc0 0x00
        0xca 0x00 0x1c 0x00 0x02 0xc5 0x1d 0x00
        0x00 0x00 0x0d 0x44 0x40 0x48 0x00 0x00
        0x01 0xcb 0x92 0x00 0x43 0x00 0x00 0x00
        0x00 0x00 0xef 0x6e

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_SIGNATURE (0x18)
CTX = HAB_CTX_COMMAND (0xC0)
ENG = HAB_ENG_ANY (0x00)


--------- HAB Event 2 -----------------
event data:
        0xdb 0x00 0x24 0x45 0x33 0x18 0xc0 0x00
        0xca 0x00 0x1c 0x00 0x02 0xc5 0x1d 0x00
        0x00 0x00 0x0d 0x44 0x40 0x48 0x00 0x00
        0x01 0xcb 0x92 0x00 0x43 0x00 0x00 0x00
        0x00 0x00 0xef 0x6e

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_SIGNATURE (0x18)
CTX = HAB_CTX_COMMAND (0xC0)
ENG = HAB_ENG_ANY (0x00)

2、Uboot automatically loads Image

U-Boot 2021.04-00006-ge529683edd-dirty (Oct 14 2022 - 05:56:30 +0000)

CPU:   i.MX8MP[8] rev1.1 1600 MHz (running at 1200 MHz)
CPU:   Industrial temperature grade (-40C to 105C) at 54C
Reset cause: POR
Model: NXP i.MX8MPlus LPDDR4 EVK board
DRAM:  1 GiB
MMC:   FSL_SDHC: 1, FSL_SDHC: 2
Loading Environment from MMC... *** Warning - bad CRC, using default environment

[*]-Video Link 0fail to find output device
probe video device failed, ret -19

        [0] lcd-controller@32e80000, video
fail to find output device
probe video device failed, ret -19
In:    serial
Out:   serial
Err:   serial
SEC0:  RNG instantiated

 BuildInfo:
  - ATF 5782363

switch to partitions #0, OK
mmc1 is current device
flash target is MMC:1
Net:
Warning: ethernet@30be0000  (eth0) using MAC address from ROM - 10:07:23:6d:da:95

Warning: ethernet@30bf0000  (eth1) using MAC address from ROM - 10:07:23:6d:da:92
eth0: ethernet@30be0000, eth1: ethernet@30bf0000 [PRIME]
Fastboot: Normal
Normal Boot
Hit any key to stop autoboot:  0
starting USB...
No working controllers found
USB is stopped. Please issue 'usb start' first.
switch to partitions #0, OK
mmc1 is current device
Scanning mmc 1:1...
61294 bytes read in 4 ms (14.6 MiB/s)
Scanning disk mmc@30b50000.blk...
Scanning disk mmc@30b60000.blk...
Disk mmc@30b60000.blk not ready
Found 3 disks
No EFI system partition
fail to find output device
Remove /soc@0/bus@30800000/ethernet@30be0000:phy-reset-gpios
BootOrder not defined
EFI boot manager: Cannot load any image
Running BSP bootcmd ...
switch to partitions #0, OK
mmc1 is current device
Failed to load 'boot.scr'
30740328 bytes read in 1277 ms (23 MiB/s)
Booting from mmc ...
61294 bytes read in 4 ms (14.6 MiB/s)

Authenticate image from DDR location 0x40480000...
GLS_HAB hab_rvt_authenticate_image 001 current_el = 2
GLS_HAB ret = 0x0

Secure boot enabled

HAB Configuration: 0xcc, HAB State: 0x99

--------- HAB Event 1 -----------------
event data:
        0xdb 0x00 0x14 0x45 0x33 0x0c 0xa0 0x00
        0x00 0x00 0x00 0x00 0x42 0x1d 0x00 0x00
        0x00 0x00 0x00 0x20

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)

Authenticate Image Fail, Please check
u-boot=>

How to make the Image authentication pass?

Is this error related to 1G DDR and TF card startup?